Course Outline
Foundations of Blockchain Technology
The architectural properties of decentralization, openness, and transparency
Cryptographic primitives securing the chain: hashing, digital signatures, and Merkle trees
Consensus mechanisms: Proof of Work, Proof of Stake, and emerging alternatives
The roles of nodes, miners, and validators, along with live network topology
Cryptocurrency Landscape
Bitcoin and its original ledger model
Ethereum and account-based smart contract execution
Privacy-focused chains: Monero, Zcash, and their distinctions from transparent ledgers
The role of stablecoins, altchains, and other assets in illicit flows
Hands-On Lab - Reading the Blockchain
Connecting to Bitcoin and Ethereum nodes for real-time data access
Navigating block explorers and querying live transactions
Analyzing raw transactions, scripts, and smart contract calls
Mapping a wallet's history on a transparent chain
Wallets, Keys, and Transaction Mechanics
Wallet taxonomy: web, desktop, mobile, hardware, custodial versus non-custodial solutions
Seed phrases, key derivation processes, and recovery vectors
Distinguishing UTXO from account-based transaction models
Understanding addresses, change outputs, and transaction graphs from a tracer's perspective
Mining and Trading as Investigative Context
Mining mechanics, pools, hash rates, and their exploitation for fund laundering or origination
The ecosystem of centralized exchanges, decentralized exchanges, and over-the-counter desks
KYC and AML controls at exchanges and points of failure
How trading patterns can obscure underlying corruption flows
Smart Contracts and DeFi Surface
The nature of smart contracts and on-chain state observability
DeFi primitives: swaps, lending mechanisms, liquidity pools, and yield farming
Cross-chain bridges and wrapped assets utilized for obfuscation
Analyzing contract interactions to identify investigative signals
Hands-On Lab - Wallet and Transaction Forensics
Inspecting hardware and software wallets in a controlled environment
Recovering and analyzing artifacts from seized devices
Reconstructing transaction graphs across UTXO and account-based chains
Address Clustering and Attribution
Common-input clustering and other industry-standard heuristics
Detecting change outputs and identifying behavioral fingerprints
Linking on-chain entities to off-chain identities via OSINT
Combining web crawling, social media data, and leaked sources for attribution
Dark Web, Marketplaces, and Criminal Cryptocurrency Flows
Mapping criminal economies on dark web marketplaces
Common typologies: scams, fraud, contraband sales, and sanctions evasion
Tracking proceeds from initial deposit through cash-out points
Identifying indicators of corruption-linked crypto activity
Privacy-Enhancing Tools and Counter-Forensics
Mixers, tumblers, and CoinJoin implementations
Privacy coins and the limitations of public-chain tracing
Cross-chain bridges and asset wrapping as obfuscation layers
Assessing what tracing techniques can and cannot recover
Hands-On Lab - Tracing a Suspect Wallet
Using open-source tools to follow complex transaction graphs
Clustering wallet networks and assigning confidence levels to attribution
Documenting findings as a structured intelligence package
Money Laundering Typologies in Crypto
Placement, layering, and integration adapted for digital assets
Layering techniques through decentralized exchanges, bridges, and mixers
Utilizing DeFi protocols as laundering surfaces and how to interpret them
Cash-out vectors: peer-to-peer markets, OTC desks, and prepaid instruments
Ransomware, Theft, and Scam Response
Ransomware payment patterns and immediate response procedures
Negotiation and recovery practices, including associated limits and risks
Analyzing exchange hacks, rug pulls, phishing attacks, and large-scale thefts
Collaborating with victims to preserve evidence without compromising the investigation
Cross-Chain Investigation
Tracing assets across Bitcoin, Ethereum, and EVM-compatible chains
Following funds through bridges and wrapped tokens
Reconciling on-chain evidence with exchange and off-chain records
Hands-On Simulation - Corruption Investigation Lab
Simulating a bribery flow across multiple chains and a mixer
Constructing a coherent narrative from fragmented on-chain evidence
Generating chain-of-custody documentation for digital evidence
AML Compliance and the Legal Landscape
FATF guidance, the Travel Rule, and jurisdictional variations
AML and KYC obligations across virtual asset service providers
Sanctions, politically exposed persons, and corruption-relevant typologies
Integrating cryptocurrency findings into existing compliance programs
Working with Exchanges and Cross-Border Partners
Utilizing subpoenas, MLATs, and information-sharing channels
Executing freezing orders, asset preservation, and seizure procedures
Coordinating cryptocurrency tracing with traditional financial investigation lines
Digital Evidence and Courtroom Readiness
Maintaining chain of custody for cryptocurrency artifacts and on-chain evidence
Presenting blockchain evidence effectively to non-technical decision-makers and juries
Addressing common challenges to digital evidence and defending findings
Collaborating with expert witnesses and external technical advisors
Capstone - End-to-End Corruption Inquiry Simulation
Conducting a full investigation starting from an initial intelligence tip
Building wallet networks, attribution models, and timelines
Engaging exchanges and cross-border partners
Producing a courtroom-ready report and delivering an oral briefing
Summary and Next Steps
Requirements
- Intermediate technical proficiency, including networking knowledge and basic Linux command-line usage
- Working understanding of cryptographic concepts such as hashing and public-key encryption
- Background in financial investigation, cybersecurity, digital forensics, or compliance
- Familiarity with at least one scripting language is beneficial but not mandatory
- General comprehension of financial transactions and AML principles
Targeted Audience
Investigators and forensic analysts working within anti-corruption agencies, financial crime units, and law enforcement bodies. Cybersecurity specialists supporting fraud detection, AML operations, and digital evidence functions. Compliance and risk professionals operating in regulated environments where exposure to cryptocurrency is increasingly prevalent.
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 8000 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (1)
- like the blockchain introduction. For a blockchain newbie like me, its englighten me. - Like the technical workshop, also interesting
